diff --git a/src/BuildFlow.Host/Endpoints/rag/AiModel/AiModelEndpoints.cs b/src/BuildFlow.Host/Endpoints/rag/AiModel/AiModelEndpoints.cs
index 8a06845..b99f533 100644
--- a/src/BuildFlow.Host/Endpoints/rag/AiModel/AiModelEndpoints.cs
+++ b/src/BuildFlow.Host/Endpoints/rag/AiModel/AiModelEndpoints.cs
@@ -1,4 +1,3 @@
-using FastEndpoints;
 using MediatR;
 using BuildFlow.Application.AiModel.Commands;
 using BuildFlow.Application.AiModel.DTOs;
@@ -12,7 +11,7 @@ public class GetAiModelsEndpoint(IMediator mediator) : EndpointWithoutRequest<Li
     public override void Configure()
     {
         Get("/ai/models");
-        AllowAnonymous();
+        Permissions("ai-model:read");
     }
 
     public override async Task HandleAsync(CancellationToken ct)
@@ -30,7 +29,7 @@ public class CreateAiModelEndpoint(IMediator mediator) : Endpoint<CreateAiModelR
     public override void Configure()
     {
         Post("/ai/models");
-        AllowAnonymous();
+        Permissions("ai-model:write");
     }
 
     public override async Task HandleAsync(CreateAiModelRequest req, CancellationToken ct)
@@ -48,7 +47,7 @@ public class UpdateAiModelEndpoint(IMediator mediator) : Endpoint<UpdateAiModelR
     public override void Configure()
     {
         Put("/ai/models/{Id}");
-        AllowAnonymous();
+        Permissions("ai-model:write");
     }
 
     public override async Task HandleAsync(UpdateAiModelRequest req, CancellationToken ct)
@@ -67,7 +66,7 @@ public class DeleteAiModelEndpoint(IMediator mediator) : EndpointWithoutRequest<
     public override void Configure()
     {
         Delete("/ai/models/{Id}");
-        AllowAnonymous();
+        Permissions("ai-model:write");
     }
 
     public override async Task HandleAsync(CancellationToken ct)
@@ -84,7 +83,7 @@ public class SetDefaultAiModelEndpoint(IMediator mediator) : EndpointWithoutRequ
     public override void Configure()
     {
         Post("/ai/models/{Id}/default");
-        AllowAnonymous();
+        Permissions("ai-model:write");
     }
 
     public override async Task HandleAsync(CancellationToken ct)
diff --git a/src/BuildFlow.Host/Endpoints/rag/RAG/RAGStreamEndpoint.cs b/src/BuildFlow.Host/Endpoints/rag/RAG/RAGStreamEndpoint.cs
index 26c2fe8..7e6609d 100644
--- a/src/BuildFlow.Host/Endpoints/rag/RAG/RAGStreamEndpoint.cs
+++ b/src/BuildFlow.Host/Endpoints/rag/RAG/RAGStreamEndpoint.cs
@@ -1,6 +1,5 @@
 using System.Text;
 using System.Text.Json;
-using Microsoft.Extensions.AI;
 using BuildFlow.Application.RagQA.DTOs;
 using BuildFlow.Domain.Interfaces;
 using BuildFlow.Infrastructure.Persistence;
@@ -24,7 +23,7 @@ public class RAGStreamEndpoint(
     public override void Configure()
     {
         Post("/rag/stream");
-        AllowAnonymous();
+        Permissions("rag:query");
     }
 
     public override async Task HandleAsync(RAGQueryRequest req, CancellationToken ct)